A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-15 01:01:56 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Fix ndp peer departed indication

Browse source 
OS_IF layer function recieving NDP peer departed indication expects
different structure than what was supplied, causing wrong values to
be interprated and leading to crash. Fix this by passing correct
structure data type.

Change-Id: I1ad6860e5c55b0efe65691262bd563e84f523a7f
CRs-Fixed: 2100848
This commit is contained in:
Naveen Rawat 2017-08-28 08:53:59 -07:00 • committed by snandini
commit 31b0f27c42
1 changed files with 16 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

28
core/mac/src/pe/nan/nan_datapath.c
View file

@ -68,23 +68,27 @@ static void lim_send_ndp_event_to_sme(tpAniSirGlobal mac_ctx, uint32_t msg_type,
lim_sys_process_mmh_msg_api(mac_ctx, &mmh_msg, ePROT);
}
static void lim_send_peer_departed(tpAniSirGlobal mac_ctx, uint8_t vdev_id,
uint32_t msg_type, void *body_ptr, uint32_t len,
uint32_t body_val)
static void lim_send_peer_departed(tpAniSirGlobal mac_ctx,
struct sme_ndp_peer_ind *ind)
{
lim_send_ndp_event_to_sme(mac_ctx, msg_type, body_ptr, len, body_val);
lim_send_ndp_event_to_sme(mac_ctx, eWNI_SME_NDP_PEER_DEPARTED_IND,
ind, sizeof(*ind), false);
}
#else
static void lim_send_peer_departed(tpAniSirGlobal mac_ctx, uint8_t vdev_id,
uint32_t msg_type, void *body_ptr, uint32_t len,
uint32_t body_val)
static void lim_send_peer_departed(tpAniSirGlobal mac_ctx,
struct sme_ndp_peer_ind *ind)
{
struct nan_datapath_peer_ind peer_ind = {0};
struct wlan_objmgr_psoc *psoc = mac_ctx->psoc;
struct wlan_objmgr_vdev *vdev =
wlan_objmgr_get_vdev_by_id_from_psoc(psoc, vdev_id,
WLAN_NAN_ID);
wlan_objmgr_get_vdev_by_id_from_psoc(psoc, ind->session_id,
WLAN_NAN_ID);
ucfg_nan_event_handler(psoc, vdev, NDP_PEER_DEPARTED, body_ptr);
peer_ind.session_id = ind->session_id;
qdf_mem_copy(&peer_ind.peer_mac_addr, &ind->peer_mac_addr,
sizeof(struct qdf_mac_addr));
peer_ind.sta_id = ind->sta_id;
ucfg_nan_event_handler(psoc, vdev, NDP_PEER_DEPARTED, &peer_ind);
}
#endif
@ -509,9 +513,7 @@ void lim_process_ndi_del_sta_rsp(tpAniSirGlobal mac_ctx,
lim_delete_dph_hash_entry(mac_ctx, sta_ds->staAddr, sta_ds->assocId,
pe_session);
pe_session->limMlmState = eLIM_MLM_IDLE_STATE;
lim_send_peer_departed(mac_ctx, peer_ind.session_id,
eWNI_SME_NDP_PEER_DEPARTED_IND,
&peer_ind, sizeof(peer_ind), false);
lim_send_peer_departed(mac_ctx, &peer_ind);
skip_event:
qdf_mem_free(del_sta_params);